OAuth 2.0 and OpenID Connect (in plain English)
What it is
Okta developer advocate Nate Barbettini explains OAuth 2.0 and OpenID Connect in a roughly hour-long talk. It starts from the problems the protocols solve and walks through the flows. The description notes the implicit flow material is now out of date.
Why Hacker News recommends it
HN repeatedly points people to it as the clearest way to finally understand OAuth, to the point that one team made it required viewing for new hires.
- 7 people recommended it
- 6 different months
- 3 strong recommendations
- first 2019, last 2026
What HN commenters said
“It's about 1h long, but it's really worth it.”
Nice, simple, hour-long OAuth explanation.
sakisv, 2020-07 · Strong recommendation · in “Everything you need to know about OAuth 2.0”
“This video was a huge help though for explaining all of the concepts”
Clarified all OAuth concepts after confusing docs.
butisaidsudo, 2023-04 · Strong recommendation · in “Why is OAuth still hard in 2023?”
“it was a requirement for new joiners to watch this in their first week”
Learn OAuth from zero.
willsmith72, 2024-04 · Strong recommendation · in “Learn OAuth by building a client with Node.js”
“Also this video is a great in-depth walkthrough”
In-depth walkthrough of OAuth and OpenID Connect.
manigandham, 2019-10 · Recommendation · in “An Illustrated Guide to OAuth and OpenID Connect”
“Listed among free OAuth/OIDC learning resources.”
krantic, 2023-11 · Recommendation · in “Ask HN: Any comprehensive courses on Auth?”
“I found Nate Barbettini's video on OAuth and OpenID Connect incredibly insightful for understanding these topics.”
Insightful explanation of OAuth and OpenID Connect.
langur, 2023-11 · Recommendation · in “Ask HN: Any comprehensive courses on Auth?”
“A classic explainer from almost a decade ago.”
Explains OAuth from the original problem it solved.
scandox, 2026-02 · Recommendation · in “What Is OAuth?”
Excerpts from Hacker News comments, linked to the originals. Summaries and labels were written by a language model from those comments.
Topics: oauth 2.0, openid connect, authentication, authorization, web security
Also recommended by the same people
explainerAmerica Keeps Rejecting an ID Card It Already HasCGP Grey · 14 HN recommenders · 2017–2024
explainerA new way to visualize General RelativityScienceClic English · 8 HN recommenders · 2020–2026
talkIndistinguishable From Magic: Manufacturing Modern Computer ChipsAndor Gafotas · 19 HN recommenders · 2016–2024
podcastJoe Rogan Experience #1109 - Matthew WalkerPowerfulJRE · 12 HN recommenders · 2018–2020
demoStargate Studios Virtual Backlot Reel 2009Stargate Studios · 3 HN recommenders · 2013–2024
talkBehind the Scenes of iOS SecurityBlack Hat · 9 HN recommenders · 2016–2026
explainerWhy Electronic Voting Is Still A Bad IdeaTom Scott · 11 HN recommenders · 2020–2026
talkUSENIX Security '18-Q: Why Do Keynote Speakers Keep Suggesting That Improving Security Is Possible?USENIX · 10 HN recommenders · 2018–2026